Launching scripts from rules

["Ron Van Dam" <rvandam () liwave com>]

Is there a way to launch a script based upon an event from a .rules file?
For instance, if I recieve a code red or nimda attack, I would like to
launch script that sends back a message to the infected machine to notify
the admin that their box is infected (e.g.
http://somehost/scripts/..%255c..%255cwinnt/system32/cmd.exe?/c+NET+SEND+127
.0.0.0.1+%22This+PC+is+infected%22)

Thanks,
Ron


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users